VulnSea

windows_8.1 vulnerabilities

CVEs whose affected-version data names the windows_8.1 package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

74 CVEsRSS

CVE-2020-1054High· 7.0CISA KEVPoC
6y ago

An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory

An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. …

▾ Abyssalmicrosoft · windows_10_1507EPSS 54%via NVD
CVE-2020-1051High· 7.8
6y ago

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory. An attacker who successfully exploited this vulnerability could execute arbitrary code on a victim system. An attacke…

▾ Twilightmicrosoft · windows_10EPSS 3.7%via NVD
CVE-2020-1048High· 7.8PoC
6y ago

An elevation of privilege vulnerability exists when the Windows Print Spooler service improperly allows arbitrary writing to the file system

An elevation of privilege vulnerability exists when the Windows Print Spooler service improperly allows arbitrary writing to the file system. An attacker who successfully exploited this vulnerability could run arbitrary code with elevate…

▾ Midnightmicrosoft · windows_10EPSS 16%via NVD
CVE-2020-1010High· 7.8
6y ago

An elevation of privilege vulnerability exists in Windows Block Level Backup Engine Service (wbengine) that allows file deletion in arbitrary locations. To exploit the vulnerability, an attacker would first have to log on to the system

An elevation of privilege vulnerability exists in Windows Block Level Backup Engine Service (wbengine) that allows file deletion in arbitrary locations. To exploit the vulnerability, an attacker would first have to log on to the system. …

▾ Twilightmicrosoft · windows_10EPSS 0.97%via NVD
CVE-2020-0963Medium· 5.5
6y ago

An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory

An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the us…

▾ Sunlitmicrosoft · windows_10EPSS 4.6%via NVD
CVE-2020-0909High· 7.5
6y ago

A denial of service vulnerability exists when Hyper-V on a Windows Server fails to properly handle specially crafted network packets. To exploit the vulnerability, an attacker would send specially crafted network packets to the Hyper-V S…

A denial of service vulnerability exists when Hyper-V on a Windows Server fails to properly handle specially crafted network packets. To exploit the vulnerability, an attacker would send specially crafted network packets to the Hyper-V S…

▾ Twilightmicrosoft · windows_10EPSS 4.6%via NVD
CVE-2020-0787High· 7.8CISA KEVPoC
6y ago

An elevation of privilege vulnerability exists when the Windows Background Intelligent Transfer Service (BITS) improperly handles symbolic links, aka 'Windows Background Intelligent Transfer Service Elevation of Privilege Vulnerability'.

An elevation of privilege vulnerability exists when the Windows Background Intelligent Transfer Service (BITS) improperly handles symbolic links, aka 'Windows Background Intelligent Transfer Service Elevation of Privilege Vulnerability'.

▾ Abyssalmicrosoft · windows_10_1507EPSS 43%via NVD
CVE-2019-1458High· 7.8CISA KEV0dayPoC
6y ago

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'.

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'.

▾ Abyssalmicrosoft · windows_10_1507EPSS 74%via NVD
CVE-2019-1405High· 7.8CISA KEVPoC
6y ago

An elevation of privilege vulnerability exists when the Windows Universal Plug and Play (UPnP) service improperly allows COM object creation, aka 'Windows UPnP Service Elevation of Privilege Vulnerability'.

An elevation of privilege vulnerability exists when the Windows Universal Plug and Play (UPnP) service improperly allows COM object creation, aka 'Windows UPnP Service Elevation of Privilege Vulnerability'.

▾ Abyssalmicrosoft · windows_10_1507EPSS 30%via NVD
CVE-2019-1130High· 7.8CISA KEV0day
7y ago

An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links, aka 'Windows Elevation of Privilege Vulnerability'

An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1129.

▾ Abyssalmicrosoft · windows_10_1507EPSS 1.7%via NVD
CVE-2018-8453High· 7.8CISA KEV0dayPoC
7y ago

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka "Win32k Elevation of Privilege Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT…

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka "Win32k Elevation of Privilege Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT…

▾ Abyssalmicrosoft · windows_10_1507EPSS 70%via NVD
CVE-2018-8174High· 7.5CISA KEV0dayPoC
8y ago

A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka "Windows VBScript Engine Remote Code Execution Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1…

A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka "Windows VBScript Engine Remote Code Execution Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1…

▾ Abyssalmicrosoft · windows_10_1607EPSS 88%via NVD
CVE-2016-7255High· 7.8CISA KEVPoC
9y ago

The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allow local…

The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allow local…

▾ Abyssalmicrosoft · windows_10_1507EPSS 81%via NVD
CVE-2015-2546High· 8.2CISA KEV0dayPoC
11y ago

The kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 allows local users to gain privile…

The kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 allows local users to gain privile…

▾ Abyssalmicrosoft · windows_10_1507EPSS 10%via NVD
windows_8.1 vulnerabilities (CVEs) — page 3 · VulnSea